Blog

Blog

Silent Ransom Group: What You Need to Know

What Is the Silent Ransom Group?Silent Ransom Group (also known as SRG, Luna Moth, Chatty Spider, Storm-0252, and UNC3753) is a financially-motivated cybercrime gang that has been stealing data from companies and demanding payment.So, It's a Ransomware Gang Then?Well, not in the traditional sense. Most people when they think of ransomware still think of malicious hackers breaking into a company's...
Blog

June 2026 Patch Tuesday Analysis

A record-breaking Patch Tuesday brings 568 CVEs. Tyler Regulg breaks down the most critical vulnerabilities, including a high-risk HTTP.sys RCE, and what security teams need to watch for potential exploitation.
Blog

DSPM for AI: A Practical Look at AI Data Security

By now, you've probably heard the airplane analogy when it comes to AI and cybersecurity. If not, cybersecurity for AI has been likened to a plane being assembled while airborne. This is a fitting visual as many of us are trying to keep up with something that is already taken off. With this same analogy, you can start to think of data as the plane fuel. No one really knows what's in the tank at...
Blog

Meta's Own AI Chatbot to Blame for Instagram Accounts Being Stolen in Seconds

Hackers have been hijacking Instagram accounts at scale by exploiting Meta's AI support chatbot. And, as if that weren't bad enough, the technique required no technical skill whatsoever.When we think about accounts being taken over, we often imagine something of at least some level of sophistication: a credential stuffing attack, a phishing campaign, a SIM-swap, or call center workers being bribed...
Blog

RatPressto Phish Kit

Learn how the RatPressto phishing kit exploits compromised WordPress sites to deploy ScreenConnect RATs through Adobe-themed social engineering attacks.
Blog

CSPM vs DSMP (or Both): How to Think About Cloud Security

As organizations continue moving workloads, applications, and sensitive data into the cloud, security teams face a growing challenge: protecting both the infrastructure and the data that lives within it.That’s where cloud security posture management (CSPM) and data security posture management (DSPM) come in. While the two technologies are closely related, they solve different problems. CSPM...
Blog

Defenders Fall Behind, as AI Rewrites the Rules of a Data Breach

For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that's no longer the case.According to the newly published 2026 report, exploitation of vulnerabilities has overtaken credential theft as the leading vector for hackers to gain their initial access — accounting for 31% of...
Blog

Agentic AI's Affordability Gap Is a Security Problem

The first agentic SOC products entering trial or are in early access phases are already metering investigations by token consumption and rate-limiting how many an organization can run per hour. Enterprise buyers can absorb this. Mid-market companies, public sector agencies, and critical infrastructure operators running lean security programs cannot, and they face the same threat landscape.
Blog

Getting to Know Goher Mohammad, CISO at L&Q

Goher Mohammad’s path into cybersecurity may feel familiar, and for good reason. Starting in IT, then moving into risk and compliance before stepping into security leadership, his journey followed the same path that played out in the industry. We recently spoke with Goher about how the CISO role is evolving, what it takes to lead through an incident, and the challenges of securing organizations...
Blog

May 2026 Patch Tuesday Analysis

This Patch Tuesday Analysis addresses Microsoft’s April 2026 Security Updates. Fortra Intelligence and Research Experts are actively working on coverage for these vulnerabilities.
Blog

BEC Global Insights Report: April 2026

Discover key April 2026 BEC threat insights from Fortra Intelligence & Research Experts (FIRE), including a 151% surge in attack volume, increased cryptocurrency scams, advanced fee fraud trends, rising wire transfer requests, and evolving email tactics used by cybercriminals.
Blog

One in Eight UK Workers Has Sold Their Company Passwords, and Bosses Think it's Fine

It's all very well defending your organization from external hackers and malware attacks, but your systems are only as strong as the people to whom you have handed the keys.According to new research, an uncomfortable number of people appear willing to sell critical credentials and passwords to the highest bidder.The Workplace Fraud Trends report, published by Cifas, claims that an eyebrow-raising...
Blog

Interview with Troy Hunt: Getting Excited About AI for All the Right Reasons. And Knowing Where to Draw the Line.

Coming from a security lens, skepticism about AI is the default. With last week’s Mythos debacle hardly in the rearview, the attitude is only reinforced. I recently had the chance to sit down with Troy Hunt and pick his brain on the subject. What he had to offer was surprising, and (dare I say) refreshing. While we can never stop asking “how is this going to hurt us,” a myopic view of the...